Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2tW7dNPIhZMwSHBMZ-_SYw7AJmo.roa
File: 2tW7dNPIhZMwSHBMZ-_SYw7AJmo.roa (raw, json)
Hash identifier: VJlTCZ3ccxaucm/XEWfM5i0LWgQXPPxviEOPFu16gQU=
Subject key identifier: DA:D5:BB:74:D3:C8:85:93:30:48:70:4C:67:EF:D2:63:0E:C0:26:6A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0187317C6A0B9164B6E88F1805000F230632
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2tW7dNPIhZMwSHBMZ-_SYw7AJmo.roa
Signing time: Thu 30 Mar 2023 07:47:29 +0000
ROA not before: Thu 30 Mar 2023 07:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Mar 2023 09:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:7c:6a:0b:91:64:b6:e8:8f:18:05:00:0f:23:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 30 07:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dad5bb74d3c885933048704c67efd2630ec0266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:07:fe:76:dc:a9:f4:00:72:7d:62:bd:8a:
93:e3:37:27:72:e0:a6:3a:58:74:60:7a:ed:4f:66:
24:91:fc:e1:57:70:ec:2d:0b:a2:85:80:ea:0c:03:
0c:23:21:33:e8:ec:85:bc:27:ec:b1:e2:b0:51:9f:
60:70:81:41:1d:b0:c7:1a:1c:af:bc:c8:2b:42:a6:
9b:83:42:51:b6:f5:ea:59:bb:fa:82:f6:f9:00:03:
c6:7c:ec:b0:0e:e6:c0:79:5f:f0:31:c7:bf:51:e8:
32:ab:9a:85:98:60:61:3c:dc:5a:eb:ee:16:64:65:
27:7e:55:38:80:70:b8:78:a0:94:bd:90:aa:44:63:
37:0a:a9:76:a9:89:12:67:5b:be:b0:6d:ba:f6:2b:
42:0f:12:d1:70:77:06:7d:8a:2c:87:9e:71:fc:77:
d9:6f:86:ca:ca:c4:ad:01:b1:e1:4f:b2:69:19:d2:
ad:12:86:fc:e3:70:3c:6f:35:f6:63:96:84:47:17:
36:cc:ba:3d:a8:cb:d1:2a:76:04:38:0f:e3:d0:cc:
c8:ba:32:ae:7b:70:82:14:fc:34:48:bf:51:d3:96:
b4:c0:be:f0:ea:cf:8c:f0:ff:e6:08:1d:1a:86:53:
ec:8e:9b:c5:3c:6d:f6:f6:d6:55:0e:2a:26:d7:27:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:BB:74:D3:C8:85:93:30:48:70:4C:67:EF:D2:63:0E:C0:26:6A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2tW7dNPIhZMwSHBMZ-_SYw7AJmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
6c:bb:17:1e:72:a7:be:f9:67:8c:3d:c7:fa:a8:46:9b:0c:ad:
fc:dc:b3:40:ee:60:ab:b9:c8:9c:8a:6a:38:53:f2:a7:81:6d:
53:74:60:55:35:dc:7b:41:30:3f:23:29:09:d5:f3:4c:f3:3b:
67:43:58:c4:a6:7d:2d:37:86:a1:7c:a6:f1:92:f8:b1:a1:45:
30:a9:ad:54:2e:a7:a0:ce:d0:63:d1:d2:7b:37:3b:4f:2c:f7:
12:50:86:2d:a7:18:2f:7a:a2:b9:09:4d:a4:a4:70:8a:0d:63:
86:2a:aa:2e:4b:ef:eb:fe:6f:cd:b4:f7:ad:b4:86:d6:58:60:
e4:ba:b2:57:07:13:fb:a9:26:83:6c:8b:6d:2a:da:48:5a:8d:
29:e4:10:59:29:a5:c0:d3:4e:f8:17:f7:94:ed:55:16:60:9d:
1f:d0:a7:9f:db:b8:07:5a:99:8f:cf:51:d1:59:54:f8:0d:c4:
2c:fe:8d:aa:24:5d:d2:f1:98:cc:71:99:87:63:23:a0:46:fb:
09:22:e0:86:e7:45:ac:4e:7e:9c:71:d1:63:75:9d:29:20:5e:
63:ff:52:49:3f:8b:05:e9:a6:d4:dd:f5:24:5c:e4:25:77:8a:
ca:f8:14:9c:c8:4a:fe:c3:62:d4:60:c7:3d:03:2d:56:c9:da:
cb:07:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org